Method and apparatus for power scheduling

ABSTRACT

Disclosed herein are a method and apparatus for power scheduling. The disclosed method is a power scheduling method of a power-scheduling apparatus for controlling a partition for at least one application, and the method includes setting a power limit for each partition, monitoring the power consumed by each partition in real time, and when power consumption exceeding the power limit is sensed in any partition as a result of monitoring, controlling an operation for the corresponding partition.

CROSS REFERENCE TO RELATED APPLICATIONS

This application claims the benefit of Korean Patent Application No.10-2015-0165390, filed Nov. 25, 2015, and No. 10-2016-0038491, filedMar. 30, 2016, which are hereby incorporated by reference in theirentirety into this application.

BACKGROUND OF THE INVENTION 1. Technical Field

The present invention relates to a method and apparatus for powerscheduling.

2. Description of the Related Art

The ARINC 653 standard provides a specification for an IntegratedModular Avionics (hereinafter, referred to as ‘IMA’) architecture inwhich multiple functions can be performed in an integrated manner in asingle computer with the improvement of the performance of the computer,in contrast with the existing art, in which a single computer performsonly a single function. The ARINC 653 standard is a standard in theavionics field, but recently, research for applying this to varioussystems is being actively conducted because it is very effective in asystem in which safety and reliability are required.

A system in compliance with the ARINC 653 standard defines eachapplication (application software) as a partition and guarantees theindependent execution of each partition. Accordingly, one partition doesnot affect another partition during the execution thereof, and an erroroccurring in a certain partition does not affect another partition.

However, if power is not smoothly supplied to a specific system, forexample, a safety-critical system, an error occurring in a certainpartition may propagate to hardware. Therefore, the stable supply ofpower is very important in such systems. Also, in the case of a systemsuch as a safety-critical system, the safety may be improved when thelifespan of a power supply device (a battery or the like) can beaccurately estimated.

However, the existing system intends merely to minimize error byguaranteeing the independence of each partition, and does not considerthe power consumed by each partition.

SUMMARY OF THE INVENTION

Accordingly, the present invention has been made keeping in mind theabove problem, and an object of the present invention is to provide amethod and apparatus for controlling power scheduling for respectivepartitions in order to improve the reliability of a system to which theARINC 653 standard is applied.

In order to accomplish the above object, a power scheduling method of apower-scheduling apparatus for controlling a partition for at least oneapplication in a system according to the present invention may includesetting a power limit for each partition; monitoring power consumed bythe each partition in real time; and when power consumption exceedingthe power limit is sensed in any one partition as a result ofmonitoring, controlling an operation for the any one partition.

Also, in order to accomplish the above object, a power-schedulingapparatus for controlling a partition for at least one applicationaccording to the present invention may include a power supply unit forsupplying power to each partition; and a control unit for setting apower limit for the each partition, monitoring power consumed by theeach partition in real time, and when power consumption exceeding thepower limit is sensed in any one partition as a result of monitoring,controlling an operation for the any one partition.

BRIEF DESCRIPTION OF THE DRAWINGS

The above and other objects, features and advantages of the presentinvention will be more clearly understood from the following detaileddescription taken in conjunction with the accompanying drawings, inwhich:

FIG. 1 is a block diagram that shows the components of apower-scheduling apparatus according to the present invention;

FIG. 2 is a view for describing an Integrated Modular Avionics (IMA)system;

FIG. 3 is a view that shows an example in which a power limit is set foreach partition according to the present invention; and

FIG. 4 is a flowchart that shows a power scheduling method according tothe present invention.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

When describing an embodiment of the present invention, repeateddescriptions and descriptions of known functions and configurationswhich have been deemed to make the gist of the present inventionunnecessarily obscure will be omitted below.

It will be understood that the terms “comprises,” “may comprise,”, andthe like used herein specify the presence of stated functions,operations, components and the like, but do not preclude the presence oraddition of one or more other functions, operations, components and thelike. Also, in the present specification, it should be understood thatterms such as “include” or “have” are merely intended to indicate thatfeatures, numbers, steps, operations, components, parts, or combinationsthereof are present, and are not intended to exclude the possibilitythat one or more other features, numbers, steps, operations, components,parts, or combinations thereof will be present or added.

In the present specification, a singular expression includes a pluralexpression unless a description to the contrary is specifically pointedout in context.

Hereinafter, the present invention will be described with reference tothe accompanying drawings.

FIG. 1 is a block diagram that shows the components of apower-scheduling apparatus according to the present invention.

In various embodiments of the present invention, a power-schedulingapparatus 100 is an apparatus to which the ARINC 653 standard isapplied, and may be, for example, a safety-critical system.

A safety-critical system means a computer, electrical or electronicsystem the failure of which may result in serious damage to people.Safety-critical systems are applied in fields closely related topeople's lives, such as the automotive field, the aerospace field, thefactory automation field, the railway field, the nuclear power controlfield, the field of medical facilities, the national defense field, andthe like. Accordingly, safety-critical systems are characterized in thatthe stable operation thereof is regarded as the top priority inconnection with the safety of society and people.

A safety-critical system is a real-time system in which the execution ofa task must be completed within a limited time period. That is, theexecution of an application must be completed by a deadline, or theexecution of a certain task by an application must be completed by adeadline.

Also, in order to prevent an error from propagating, that is, in orderfor interruption of the execution of a certain application to avoidaffecting the execution of another application, the safety-criticalsystem must separately allocate execution time to respectiveapplications, so that the applications may independently use the timeallocated thereto. Furthermore, the safety-critical system must dividethe memory area in which applications are executed, so that applicationscannot trespass on each other's memory area.

Such a time/space partitioning technique of a safety-critical system maybe implemented by applying the ARINC 653 standard.

The ARINC 653 is a standard interface specification used for an avionicssystem, which is a representative safety-critical system, and itcomprises an API specification for a real-time operating system. TheARINC 653 defines APplication EXecutive (APEX), which is an interfacebetween an operating system and an application running thereon.

The ARINC 653 standard is proposed for IMA. IMA provides a platform inwhich applications, which were executed on distributed systems accordingto an existing federated system structure, are integrated into a singlehigh performance processor-based system, as illustrated in FIG. 2. IMAintegrates multiple existing modules (electronic devices) into a singlecomputing device, and thereby enables the reduction of the size andweight of the whole system and the reduction of power consumption.

However, IMA in the form of an integrated platform entails thepossibility of an error in an application being propagated to the entiresystem. Accordingly, methods for guaranteeing the independence of eachapplication have been actively researched in order to prevent errorpropagation between applications, and the ARINC 653, which is a standardspecification for an interface between a real-time OS for an avionicssystem and applications, has been specified.

The ARINC 653 standard introduces the concept of a time/space partitionin order to guarantee strong independence between applications. Here, asingle module for performing a single function, to which the ARINC 653standard is applied, is defined as a partition, and when multiplepartitions are executed together, the partitions are separate from eachother temporally and spatially and thus do not affect each other.Specifically, each of the partitions individually executes its task atthe time appointed according to a system configuration, whereby temporalindependence is guaranteed. Also, because each of the partitionsexecutes its task using only an independent memory area allocatedthereto, spatial independence is guaranteed.

The above-described ARINC 653 standard is a standard for the avionicsfield and is highly effective in a system in which safety andreliability are required, but has recently come to be applied to varioussystems with the development of hardware and the generalization ofmulticore hardware. The system to which the ARINC 653 standard isapplied defines each application (application software) as a singlepartition and guarantees temporal and spatial independence betweenpartitions. That is, partitions do not affect each other while they arebeing executed, and an error occurring in a certain partition does notaffect the execution of another partition.

The power-scheduling apparatus 100 according to the present invention isan apparatus for supporting a system to which the above-described ARINC653 standard is applied, and may define each application as a partitionand operate partitions so as to be temporally and spatially separatefrom each other.

A system to which the ARINC 653 standard is applied, such as asafety-critical system, may require the consistent supply of power forthe stable operation of partitions in addition to time/spacepartitioning. Unless sufficient power is supplied to each of thepartitions, an error may occur in a certain partition or the entiresystem.

Therefore, the power-scheduling apparatus 100 according to the presentinvention controls the amount of power to be consumed for each of thepartitions.

Referring to FIG. 1, the power-scheduling apparatus 100 according to thepresent invention may include a power supply unit 110, a control unit120, and a storage unit 130.

The power supply unit 110 may receive internal or external power andsupply power required for operation to the components of thepower-scheduling apparatus 100. Specifically, the power supply unit 110may supply power to at least one partition under the control of thecontrol unit 120.

The control unit 120 may include one or more processors and serves tooperate a system. In an embodiment, the control unit 120 may performcontrol operation in compliance with the ARINC 653 standard in order tooperate the system.

Specifically, the control unit 120 defines each application as apartition, and may schedule the execution of a partition and tasksexecuted in the partition. The control unit 120 may schedule theexecution of a partition and the use of a core for execution, in orderto guarantee temporal and spatial independence between partitions. Thatis, the control unit 120 may appoint, in advance, the time at which eachpartition is to be executed according to scheduling, and may assign acore to each partition for execution thereof.

For example, the control unit 120 executes only a single partition inany time slot, but may schedule tasks within the partition so as to besimultaneously executed by multiple cores in order to make better use ofthe multicore resources (symmetric type). Alternatively, the controlunit 120 may schedule tasks of multiple partitions so as to be executedby different cores in any time slot (asymmetric type).

When scheduling tasks, the control unit 120 may consider the priorityorder set for each of the tasks.

In various embodiments of the present invention, the control unit 120may control the components of the power-scheduling apparatus 100 inorder to perform a power scheduling method.

Specifically, the control unit 120 sets the maximum amount of poweravailable for each partition (application), that is, a power limit,measures power consumed by each partition in real time, and performscontrol in order to prevent the real-time consumption of power by eachpartition from exceeding the preset power limit. Accordingly, thecontrol unit 120 may prevent the occurrence of an error that may arisefrom power shortage in a partition when another partition consumesexcessive power.

In various embodiments of the present invention, the control unit 120may perform initial setup for the above-mentioned power scheduling. Thecontrol unit 120 may determine the total amount of power that the powersupply unit 110 can supply to the entire system and the amount ofinstantaneous power. Also, the control unit 120 may determine the amountof power required for the execution of a task for each partition.

The control unit 120 presets a power limit for each partition based onthe determined total amount of power that can be supplied, the amount ofinstantaneous power that can be supplied, and the amount of powerrequired for each partition, as shown in FIG. 3. The control unit 120may set the power limit depending on task scheduling of each partition.Specifically, when the execution of a task of a partition is scheduledfor a specific time and a specific space (i.e. a specific core or aspecific area of a specific core) in the state in which temporal andspatial independence between partitions is guaranteed, the control unit120 may set the power limit, which is the amount of power available atthe corresponding time and in the corresponding space, as shown in FIG.3.

The power limit may be set using the information determined through anyalgorithm or equation, and there is no limitation as to the algorithm orequation.

In various embodiments of the present invention, the control unit 120may monitor the power consumed by each partition in real time.

In an embodiment, the control unit 120 may monitor the power consumed byeach partition using a sensor. In this case, the power-schedulingapparatus 100 may further include a sensor unit 140.

The sensor unit 140 may sense the power consumption state of eachpartition and deliver information about the power consumption based onthe sensed power consumption state to the control unit 120.

To this end, the sensor unit 140 may include at least one of a currentmeasurement sensor and a power measurement sensor. The sensor unit 140may measure the current or power consumed by each partition or each ofthe components of the power-scheduling apparatus 100 in real time usingthe sensor. The sensor unit 140 delivers information about the measuredcurrent or power consumption to the control unit 120, so that thecontrol unit 120 may determine the power consumed by each partition.

The power consumption state has been described as being sensed using thesensor unit 140, but this is merely an embodiment, and the powerconsumption state may be sensed by measuring current or power throughvarious software methods.

Alternatively, in an embodiment, the control unit 120 may monitor powerconsumption by sensing an event. The event used to measure powerconsumption is related to an operation that can change powerconsumption, for example, an input/output event related to an input oroutput operation or a communication event related to sending orreceiving data. The input/output event may include, for example, aninput event for controlling turning on or off the power-schedulingapparatus 100 or an input event for controlling a power consumption mode(for example, control for switching between a standby mode, a sleepmode, and an active mode).

In this case, the power-scheduling apparatus 100 may further include atleast one of an input/output unit 150 and a communication unit 160.

The input/output unit 150 may include at least one input module forgenerating an input signal in response to user input or using anexternal device. The input module may be configured with a key pad, adome switch, a touch pad (static pressure type/electrostatic type), ajog wheel, a jog switch, and the like. Alternatively, the input modulemay include a switch, a circuit, and the like for communicating with anexternal device. Also, the input/output unit 150 may include at leastone output module for outputting information about the power-schedulingapparatus 100 or an apparatus having the power-scheduling apparatus 100as a component thereof. The output module may be configured with adisplay, a sound output unit, a lighting unit and the like.Alternatively, the output module may include a switch, a circuit, andthe like for communicating with an external device.

The communication unit 160 may send and receive data to and from theoutside by performing wired and wireless communication. To this end, thecommunication unit 160 may include at least one of a wired/wirelesscommunication module and a short-range communication module.

When an input/output event or a communication event occurs, theinput/output unit 150 or the communication unit 160 delivers informationabout the event to the control unit 120. The control unit 120 maydetermine the power consumed by each partition based on the informationabout the event.

The above-described event is merely an example, and the control unit 120may determine the power consumed by each partition based on previouslystored information about power consumption corresponding to an eventwhen various types of hardware of the power-scheduling apparatus 100 arecontrolled in a software manner.

In various embodiments, when power consumption is determined based on anevent, the control unit 120 stores, in advance, information about powerconsumed by a partition in connection with at least one event, and maydetermine the power consumed by a partition using the stored informationwhen a certain event occurs.

The control unit 120 monitors power consumption. If the power consumedby any partition exceeds a preset power limit thereof, the control unit120 prevents the use of power in order to avoid exceeding the powerlimit by controlling the execution of the corresponding partition.

For example, when the power consumed by any one partition exceeds thepreset power limit, the control unit 120 may forcibly terminate orinterrupt the execution of the corresponding partition, or may preventthe power supply unit 110 from supplying power to the correspondingpartition. However, this is merely an example, and there is nolimitation as to the operation of the control unit 120 for controllingthe power consumption.

In various embodiments of the present invention, when the powerconsumption in any one partition is equal to or less than the presetpower limit, the control unit 120 may monitor the remaining amount ofpower, which is the difference between the preset power limit and thepower consumption. After that, when an additional amount of powerexceeding the preset power limit is required in the correspondingpartition, the control unit 120 may allocate the remaining amount ofpower to the corresponding partition rather than controlling theexecution of the corresponding partition.

In this embodiment, because the control unit 120 separately manages theremaining amount of power for respective partitions, the power consumedby a partition may not affect the power consumed by another partition.

The storage unit 130 may include various pieces of information for powerscheduling under the control of the control unit 120. Specifically, thestorage unit 130 may store information about task scheduling for eachpartition, information about a power limit set for each partition, andthe like, or may store information about power consumption correspondingto some event.

FIG. 4 is a flowchart that shows a power scheduling method according tothe present invention.

Referring to FIG. 4, first, the power-scheduling apparatus 100 accordingto the present invention sets a power limit for each partition at step401.

The power-scheduling apparatus 100 may determine the total amount ofpower that can be supplied to the entire system and the amount ofinstantaneous power. Also, the power-scheduling apparatus 100 maydetermine the amount of power required for executing a task in eachpartition.

The power-scheduling apparatus 100 presets a power limit for eachpartition based on the determined total amount of power that can besupplied, the determined amount of instantaneous power, and the amountof power required for each partition. The power-scheduling apparatus 100may set the power limit depending on the task scheduling of eachpartition. Specifically, when the execution of a task of a partition isscheduled for a specific time and a specific space (i.e. a specific coreor a specific area of a specific core) in the state in which temporaland spatial independence between partitions is guaranteed, thepower-scheduling apparatus 100 may set the power limit, which is theamount of power available at the corresponding time and in thecorresponding space.

The power limit may be set using the information determined through anyalgorithm or equation, and there is no limitation as to the algorithm orequation.

Subsequently, the power-scheduling apparatus 100 monitors the powerconsumed by each partition at step 402.

In an embodiment, the power-scheduling apparatus 100 may monitor thepower consumed by each partition using a sensor. The power-schedulingapparatus 100 may receive information about the power consumed by eachpartition from at least one sensor, and may determine the power consumedby each partition based on the received information. For example, thepower-scheduling apparatus 100 may determine the power consumed by eachpartition by receiving information about the amount of current or powerconsumed in each partition from at least one sensor.

In an embodiment, the power-scheduling apparatus 100 may monitor thepower consumption by sensing an event. The event used to measure powerconsumption is related to an operation that can change powerconsumption, such as an input/output event related to an input or outputoperation, a communication event related to sending or receiving data,and the like. The input/output event may include, for example, an inputevent for controlling turning on or off the power-scheduling apparatus100 or an input event for controlling a power consumption mode (forexample, control for switching between a standby mode, a sleep mode, andan active mode).

The above-described event is merely an example, and the power-schedulingapparatus 100 may determine the power consumed by each partition basedon previously stored information about power consumption correspondingto an event when various types of hardware of the power-schedulingapparatus 100 are controlled in a software manner.

In various embodiments, when power consumption is determined based on anevent, the power-scheduling apparatus 100 stores, in advance,information about the power consumed by a partition in connection withat least one event, and may determine the power consumed by a partitionusing the stored information when a certain event occurs.

The power-scheduling apparatus 100 determines at step 403 whether thepower consumed by any one partition exceeds a preset power limit bymonitoring the power consumption.

When it is determined that power consumption exceeding the power limitis sensed in any partition, the power-scheduling apparatus 100 controlsthe execution of the corresponding partition at step 404.

For example, if the power consumed by any one partition exceeds thepreset power limit, the power-scheduling apparatus 100 may forciblyterminate or interrupt the execution of the corresponding partition, ormay prevent power from being supplied to the corresponding partition.However, this is merely an example, and there is no limitation as to theoperation of the power-scheduling apparatus 100 for controlling powerconsumption.

In various embodiments of the present invention, when the powerconsumption in any one partition is equal to or less than the presetpower limit, the power-scheduling apparatus 100 may monitor theremaining amount of power, which is the difference between the presetpower limit and the power consumption. After that, when an additionalamount of power exceeding the preset power limit is required in thecorresponding partition, the power-scheduling apparatus 100 may allocatethe remaining amount of power to the corresponding partition rather thancontrolling the execution of the corresponding partition.

In this embodiment, because the power-scheduling apparatus 100separately manages the remaining amount of power for respectivepartitions, the power consumed by a partition may not affect the powerconsumed by another partition.

The power-scheduling apparatus 100 may control the power scheduling byrepeatedly performing the above-described operation as long as theturned-on state of the power-scheduling apparatus 100 is maintained.

The method and apparatus for power scheduling according to the presentinvention enable a system to operate stably by consistently supplyingconstant power to respective partitions while the system is driven.

The method and apparatus for power scheduling according to the presentinvention set the maximum lifespan of the entire system or respectivepartitions in advance, whereby it is possible to prevent an error thatmay occur when power is in short supply while a certain task is beingexecuted, or an error that may occur when the instantaneous supply ofpower is insufficient. Also, the method and apparatus for powerscheduling according to the present invention may extend a time periodfor executing a certain task because the consumption of battery power isknown in advance, and may enable a main task and a task subsidiarythereto to be processed together depending on the consumption of batterypower when a task execution time is limited, whereby stability andproductivity may be improved.

The method and apparatus for power scheduling according to the presentinvention relate to the distribution of power to be consumed byrespective partitions, which was overlooked in the ARINC standard, andbased on this, a safety-critical system having high reliability may bedeveloped. Therefore, the method and apparatus may have highapplicability when the specification is applied.

The above description merely illustrates the technical spirit of thepresent invention, and those skilled in the art may make various changesand modifications without departing from the scope of the presentinvention.

Accordingly, the embodiments, having been disclosed in the presentinvention, are intended not to limit but to describe the technicalspirit of the present invention, and the scope of the technical spiritof the present invention is not limited to the embodiments. The scope ofprotection of the present invention must be interpreted based on theaccompanying claims, and all the technical spirit in the same range asthe claims must be interpreted as being included in the scope of rightsof the present invention.

What is claimed is:
 1. A power scheduling method of a power-schedulingapparatus, comprising: by at least one hardware processor: setting powerlimits specifying amounts of power available for partitions,respectively, to execute applications independent of each otheraccording to the set power limits, the setting of power limits includingspecifying a first maximum amount of power available for a firstpartition among the partitions for a first time period and a firstmemory space, and a second maximum amount of power available for asecond partition among the partitions for a second time period and asecond memory space; monitoring a first power consumption of the firstpartition and a second power consumption of the second partition in realtime while a first application and a second application among theapplications execute within the first partition and the secondpartition, respectively; and controlling power scheduling for at leastone of the first partition and the second partition, in response to oneof the first power consumption exceeding the first maximum amount ofpower available for the first partition and the second power consumptionexceeding the second maximum amount of power available for the secondpartition, wherein, among the partitions, the controlling forciblyterminates or interrupts an operation of the first partition and/or thesecond partition, or prevents power from being supplied to the firstpartition and/or the second partition without changing both the firsttime period and the second time period and the first memory space andthe second memory space, to thereby avoid an error from occurring inremaining partitions.
 2. The power scheduling method of claim 1, whereinsetting the power limits comprises: determining a total amount of powersuppliable to a system including the partitions and an amount ofinstantaneous power; determining an amount of power necessary to executethe first application and the second application in the first partitionand the second partition, respectively; and setting the first maximumamount of power available for the first partition and the second maximumamount of power available for the second partition based on thedetermined total amount of power, the determined amount of instantaneouspower, and the determined necessary amount of power for the firstapplication and the second application.
 3. The power scheduling methodof claim 1, wherein setting the power limit comprises: scheduling thefirst application corresponding to the first partition, and the secondapplication corresponding to the second partition; and setting, thefirst maximum amount of power available for the first partition for thefirst time period and the first memory space, and the second maximumamount of power available for the second partition for the second timeperiod and the second memory space, according to the scheduled firstapplication and the second application to execute within the firstpartition and the second partition for the first time period and thesecond time period and for the first memory space and the second memoryspace, respectively.
 4. The power scheduling method of claim 1, whereinmonitoring the power consumption comprises: receiving information abouta power consumption of the partitions, respectively; and determining thepower consumption of the partitions, respectively, based on the receivedinformation.
 5. The power scheduling method of claim 4, wherein theinformation about the power consumption includes any one or combinationof a current consumption and a power consumption.
 6. The powerscheduling method of claim 1, wherein monitoring the power consumptioncomprises: sensing at least one event occurring in the first partitionand the second partition, respectively; and determining the powerconsumption of the first partition and the second partition,respectively, based on previously stored information about powerconsumption corresponding to the at least one event.
 7. The powerscheduling method of claim 6, wherein the at least one event includesany one or combination of an input/output event and a communicationevent related to sending and receiving data.
 8. The power schedulingmethod of claim 1, further comprising: managing, when a powerconsumption for a partition among the partitions is equal to or lessthan a power limit among the power limits, a difference between thepower consumption corresponding to the partition and the power limitsensed as a remaining amount of power for the partition, wherein thecontrolling of the power scheduling comprises scheduling the remainingamount of power for the partition.
 9. A power-scheduling apparatus,comprising: a power supply to supply power to partitions to executeapplications independent of each other according to set power limits forthe partitions, respectively; and a controller to: set power limitsincluding specifying a first maximum amount of power available for afirst partition among the partitions for a first time period and a firstmemory space, and a second maximum amount of power available for asecond partition among the partitions for a second time period and asecond memory space, respectively, monitor a first power consumption ofthe first partition and a second power consumption of the secondpartition in real time while a first application and a secondapplication among the applications execute within the first partitionand the second partition, respectively, and controlling power schedulingfor at least one of the first partition and the second partition, inresponse to one of the first power consumption exceeding the firstmaximum amount of power available for the first partition and the secondpower consumption exceeding the and the second maximum amount of poweravailable for the second partition, wherein, among the partitions, thecontroller performs a control so as to forcibly terminate or interruptthe operation for the partition, or to prevent power from being suppliedto first partition and/or the second partition without changing both thefirst time period and the second time period and the first memory spaceand the second memory space, to thereby avoid an error from occurring inremaining partitions.
 10. The power-scheduling apparatus of claim 9,wherein the controller, determines a total amount of power suppliable toa system including the partitions and an amount of instantaneous power,determines an amount of power necessary to execute the first applicationand the second application in the first partition and the secondpartition, respectively, and sets the first power consumption exceedingthe first maximum amount of power available for the first partition andsecond power consumption exceeding the second maximum amount of poweravailable for the second partition based on the determined total amountof power, the determined amount of instantaneous power, and thedetermined necessary amount of power for the first applications and thesecond application.
 11. The power-scheduling apparatus of claim 10,wherein the system uses the ARINC 653 standard.
 12. The power-schedulingapparatus of claim 10, wherein the system is a safety-critical system.13. The power-scheduling apparatus of claim 9, wherein the controller,schedules the first application corresponding to the first partition,and the second application corresponding to the second partition, andsets the first the first power consumption exceeding the first maximumamount of power available for the first partition for the first timeperiod and the first memory space, and the second power consumptionexceeding the second maximum amount of power available for the secondpartition for the second time period and the second memory space,according to the scheduled first application and the scheduled secondapplication to execute within the first partition and the secondpartition for the first time period and the second time period and thefirst memory space and the second memory space, respectively.
 14. Thepower-scheduling apparatus of claim 9, wherein the controller determinespower consumption of the partitions based on information about powerconsumption received when a power consumption state is sensed,respectively.
 15. The power-scheduling apparatus of claim 14, whereinthe information about the power consumption includes any one orcombination of a current consumption and a power consumption.
 16. Thepower-scheduling apparatus of claim 9, wherein the controller senses atleast one event occurring in the partitions, respectively, anddetermines the power consumption of the partitions, respectively, basedon previously stored information about power consumption correspondingto the at least one event.
 17. The power-scheduling apparatus of claim16, further comprising: at least one of an input/output device to sensean input/output event in the first and second partitions and acommunication device to sense a communication event in the first andsecond partitions related to sending and receiving data, wherein todetermine the power consumption of the first and second partitions, thecontroller senses at least one of the input/output event or thecommunication event through the at least one of the input/output deviceand the communication device.
 18. The power-scheduling apparatus ofclaim 9, wherein, when a power consumption, for a partition among thepartitions, is equal to or less than a power limit among the powerlimits, the controller manages a difference between the powerconsumption corresponding to the partition and the power limit sensed asa remaining amount of power for the partition, and the controllerschedules the remaining amount of power for the partition.